This removes code that is only used within a backend implementation from
the backend package. The latter now only contains code that also has
external users.
The restic security model includes full trust of the local machine, so
this should not fix any actual security problems, but it's better to be
safe than sorry.
Fixes#2192.